Abstract of CN1310526A 

Title: INTEGRATED COMPUTER EMERGENCY RESPONSE SYSTEM IN 
INFORMATION TECHNOLOGY INFRASTRUCTURE AND OPERATING METHOD 
THEREFOR 

A emergency reaction system for network illegal activities 
of investigation, detection, tracing and evidence obtaining 
is a safety protection device and method which includes the 
safety signal converting and transmitting device connected 
in sequence with the user's end, one or several safety 
control centres. The present invention utilizes the 
existing network safety protection products to collect the 
relevant network safety information and further to form it 
to be a standard format information to establish VPN 
channel or encryption channel with the network detecting 
control centre for transmitting the collected signal to the 
leadership and transmitting the counter change order from 
the detecting control centre to the user's end. The present 
invention can be developed from a single point protection 
to a system protection, can supply the manual auxiliary 
handling, can obtain and store the relevant information of 
network safety event at the same time, can use the system 
to search out upwards the illegal attack source IP (net 
work address) . 
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1. ->ftn»«^^«[ftlttj&ift»«ijEjSft^«lllS. fcfca^iMttW 

*>flrA#*#*, »*»n«*, <sA##r#&*nAi£ 

^ixmii«t^fisfmttfi»>^*ff*it. 

Attifttt^JvRttft^fitfi^^ffiininff^ii. 

ntt«n«Attt7glbiR9J#^A««lftAn#A. 4*/**#rA#*tt#5 

H»*^«[«+^«jfiia#2.ffiijiA vpn flitttMUnvmiflit. u^m 
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^m^R-nm^r^Mn^^m^nm.m^tmmummmmft 
m^m^^WR^mnm^m^mmft^^mm^ 

ui&m?u&m&%£toj*&3zm&ft®<xm. A&mm$t <ids> ^ a 
i. T-w\m&&±]* ^ 

B^^^ftMs, laBM, <mm ft &® p ± 

5.ft&*mr-rfr 0 mm&£&j*&Rft*&ftM>&fi#tiT, *mm& 
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mz^mmmfam * 

fr**^^**!]**. R)flt^A#Hift#« fcA£*rifc#*iAi£#1ft 
&*S&&; Wi*+^A#l«*W^^E*+^ift*«Kteffl*JR«atlt 

vpn ait«x4un«^«uti mt&mA&tt&MmmftmwtMAt ft 

-^*/»J««Af**ift#ft»*ilttat -^*^»ffifA4Hfc*#^rWft»- 
^«^*^^A»!ftiftMH**^Jftlft*4>±m»jB«#^. 

*ra»SCM«A«fif gftVUM#£ja««fe3tttffiA. gS^ttttAfffttt* 
5H»££»tt+tf*lS1&*;£IM:fc VPN iftiMgftlinftttltftit, 
W»*^Jft»+H>Tft»*^**^**ttfift»^W*^*ffiFA»*«*± 
^W»*^lft»4»'i>tt^ttaW«A*#lli±S+^«l(SH^^«^* 

*Pl»Ai&> iDSo ^^WS^^^n^^AAdB^, 

2«^Alil)AtI, AI»«ift*#*WS5ffl*^, it&m^ 
AI*<fiai^WWW»»»W»«ftff*iR#J*, SKfABtWttifctta. ^A 
Ilt#W*M»i *SliX*lR*«i*iBafftQi^^tfr«:tfJ«#Jg. AlSMfS 
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*lfl-^*#±W*Jt«9. 

9 9 ***wffi4ia*a*ttw-*ttjacffl3fcit«**9. 

&&«#*ng^^m#*firifc&, Jn9 iff*. 

1 (£^*f&££#&) Rm*Ttr«±lF*» IDS, Kr*i§, F9t» 



&4*A (tat m> 

18:4- l <#^«*^*4) &Rrttfi*W*ft«f3**tttt#«lift4. 
£4) 

#4 2 (g/WflrAttfeift*) «t«t#*3»W^ttllS. *-*«*tt4 
l <#^»ft^tt4) /^tt^W&^+B^A, 

*fo«4) ftii&W»££lfi!S+4>. *-*«5M*4 3 (ft^*ffiAtt*tt4) 
«ttM*an»«^JB»>t>4>n&fi4IAffjftJAtt4 l (*^*$^«4) °J 

»*4i (*7 s, *$^ft4) 

*l±. *i*£Hlfr*£S*flrAfi. T*H*fcAJTW**JR»4Mr. 

€ARTtt**Btfti&iiJJi*-« *3Srtt«ffl$«*#S^W^« 
**#*AaW«te£i*ii^£aMIA. «JB#lM*P«*«##ja^att 

. w*iftiw«jR«^r3«;««*/ , «/**« *j*AW££flr 

AXiMltft. »A«*****BAH5, 6, 7. 

iiff*fff&A^W»Aft^**ffl^SW*/'*$^«4WjEmagfir. 

»5fc£»£*#W4*«*. $P: ttfe~]> * IP, Sift IP, «P, WIMMSU 



m^AMI^. ^^H^ft^ftMAWf^ME. #&2 <£ 

3 (*>«ftAmra#) vpn 
«*^««Amift*^ntt«^JBfi^H>iejffiift^PIIttA: vpn 

*T*iiEflA*A«l^«tt. *MWfcA#*-£tt*£*fc3I. Wn. 

jp<HA«^«*tt*Aflff*p. tt^A^asiii+at^ft^ttaw^a* 

^^HKKt^aWflA. 64 bits 3\ 128 bits ft 

MD2, #ttt MDI fQ MD2, »*-#*-»WiU^|M*5E»tt. 
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^tt^lfcmifc^^W^fl* M jta±3tfflW« Tclock, 

jW3K#ffi«ra*ttxflirA m m mdi a^jp*tta. 

m«faaf5:c |i)Bt5iJiieKjBt« Tclock #JH?Til^A^e£«*b3lft; 

^□fltSft Tclock #^|Sj^^,^#HJ^^mMD2 fO^A* gMfj;fcffifMDl 

ffiAtt3eK&*&SAS8. 

#* 3 <*;*)|ffiA**ift*) lTtt»aW*W*ffli«l*lW»«fli^fll 

tt# 2 (gs**ftttA&*tt*) fllft* 3 (g^ffltAWttt*) 
£*-+**. 

-^^fflTHWawa+RTiuw^ia* i c*;***^*). ft* 2 (* 

«m—ti&* 2 («/>J|ffiAtt*tK*) 3fc&*b££>hT&* l 
<*;***£**) j^flMIA. iWUtfMHfc* l (£/**£££#*) 
>h**2 (*;**4frA***1ft*) ft**ttf«. 

flUtftft. ~^&* 3 AKHtt*) WI2lft*-**£>Mfc* 

ATA. aff»^lttfiE*W«ft»fi»»«*^^«:3l. WJVfr-HN&4M>, 
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4>&ft¥Si£&> flA^tffift*, Ai£#&&£$B#, *n®2#r^. 

4 (+iCH*A#tfft#> ^§iS:& 3 (*^«IBrAftlltt*) fitafrtfc^ 
ft. vpn g& vpn WJAJ^ft&ttWtit. ft 
SflrAtt**£. 3 (g;*W*Aft*tt*) 4 (*4>ffiAtt*ift 
*> tt±KK»Jtt-f tt* 4 (4>«flrA4t*ift*) ^ttfcfWWWatii** 

3 (3^wirAtt*ft#) fcfttoafflHUt, i 
tt*) &&flTA. 2 ±4*«H»A« MJ.^ 

& 4 (iN>fflrAtttft1ft*) «#W«#fci<mi#^1»4>ifc* 4 <«H>teA4# 
*tt*) tt^ftltfftllfllt. #ii#tt«l'H>M*Ai B5JL** 4 (*<CritAtt 

nit*) s^rm^xiM^Att <»^*»n«**«) g&ta&fttraat. 

IM«Jfi«:#l^tt31Jl7MiLtt*j te &»#rA. *n#& 2 (*;*)MrA#*tt 
*) Mffi^ft»**W«A. (WA^tffft*) i*£«#tFrtt**. 

tbSiftU fig* JM«*#ft*Jtf^tt#. 

5 <*HMtfW£rtt*) HWasii^«:#ttAi^+H>tt»*f^Afia 

5 <«4>*fM*a«*) nitajMtifcftisiAW^'OiMii^Afl* 

*tM*Mft# 2 (*^>«flA^ift*) IH¥[KM*Att. 4 (4^ 
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ft* 6 «@ T%\A&mm&m&Maan&*#to&. 

ft* e («A#Mtt#) a*«*#tt>fei*a^A«#ittrRrisi*^ft 
ft* 7 (tAMttt) Rrtt*«**nna#«jEfc. 

ft* 7 <flrA#*rft*) R!it«««#>tW«l>*ii*»f^Afi«l** 5 

ct"i>iwpf6**) foft* 7 (njtatftt*) gtb*R*. 

ft*Q#tfr. *7i*»a*Btt. ft* 7 (flrA#0rft*) PWiWt*#WAi* 

ft* 7 <ffirA^#ftt*) «iH«rfift*6 («A$«rft*). 

*TJSitf«^BW. ft* 7 (flTAfttfrft*) IW^fcft+WiafcffiWtt* 

ft* 8 (AX£#ft*) J8^**httJH&*lM3*J£. ft* 8 (Al^jfft 
*) ««<k#AiflFtt*^*»tt* 7 (flrA#tfrft*) #4ffft3mflMIA£tf 

ft* 8 (AlAftft*) ft^ttfritW^ftftiBifttt^ftW^atttf* 

mra* ttajsr*. &3jM&&sa£##«. ^wft 

*5 <«N>MMW*ft*> »ffWR. 



ids ^n°p, & ids i*&&*m&&±%m*im&toi tc &#m, *m 

IDS jR^ft«#«^«/J»^«H^A(F. &*AE& 

» ids JKttnA#*tmft«E7ift# 2 ff^WIAttllllftMti 3 

■ ¥^+*tt«E*f^Afi«lffl*# 5 <+<i>&flE¥&&&) ^Affi/* A 
A#*tttM- 4 (4M>fllA#*tt*) ±#&*'L>, 8^ A lE^Sy*^^^ 

#^4*^ a. 2 (^mi^M) &*uft ids %m&>m£m 
hscpj ids #^«±#wnA. ids jKttft^mt&g- ids %*m& 

«. £ IDS JKlM^M@A9ffAfi@lfr IDS Xttff^li. ^fcftfl*, ttft 
2 (t^ttflTAttftttft) ids jKffcp£toW»££W*ttA. « ids 

JKtt^^ttftA (msgO) 4F#&£ltffl, Tattack, 

27 IDS «DlER»$^ft^^li«4<^9i). « 

IP2, IPm. 2 <*S*WiA£&&*) &±&l*l£i£ 

lH£Str^tt-'ft£MiA («gl)« ffi^ A, *#£&B*BI Tattack, 

*^»#^»^« 39 (mm&i!Ei&*m&%±mmm&iz&mftft&ws&* 

flMWX IPru #*Bft IPrao 3 (g/>«fllAtttliSt*) 

ssl i^«^5t^^W¥Hb^^^3i^^, ftftASiCft RSA AMMBxtfE 

MDlf ffl 1024 & DES ft* JtifctttiTA ( Hi) M ft MD1 StlflPtftta. 
Si »*X C «ffH*ft3l. JSftHIKMt Att* msgl 3RlBm Tclock $*|Sjl% 

##PJ6«Ji^mMD2fa^A4>i^Wi^MDi jftffxttt. 
*M. tt***M»A**i mtA«i msgl 6 <4iA#teift#). 

ttAttftttiett*. 



ftW, #f&#rJI&#J> IP> *m IP ^raMAMffAW 

ft A*#&tt3l£*JB 1024 & DES Sfeff IP*. tt/g&lnft£j&ffl«&&fr 

**, IP2, Bift iPm JftftsAAWBlSilHt* 6 (fflUNI 

**) «MHIflWr*5 msgi ft£titirA. in: a ffl^W^A, 39 -^a* 
IP tiifttAe. ^AM«««m^^*S^*«l IP2 

J* A JB^toW^AflfclflR*. HRtttft^Bft^ttftiRIDift 
& 6 (ffiAffffttt*) 4»^#WW^ 39 ^#Tfrtfj#%*tJI#&, SgftMJ* 
a ttnn«MAAIK«jfi*ltlt. #*^AttftJ3^ a ftattftiftffl^fts. 

ttAttffli flTA&Si ffl^±JRW*A«sgi, ffl^AWW^cK 

»rJB*XA+4>tt* 8 (AliHf^). A«f»H>«* 8 (AIJ»*#) 

PW. *<(>1ft# 6 («AffHtt#) 4»*S*flltt IP * 

JMlTMtt IP2 M^Z.*£#+4>]ft»«B. ?ft*iJM^Aft&£IZ'£'t> 
JH^ + 'MfcttJllMS IP2, IP2 WteA±#A4"i>. 
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KflMlgBX^ IP *^WS6<J. XfiftRM(^4a>tttAn ipi M : fW^4»H> 

A. #ft*T«5»Jtt* 1 (#^**^ft*) «Wfe. c ft 

M*«&A*7ftlt£*l. «J&«f>4WMJr. 8*£S«*l*±tt>*ltffl» ipo. 

If &Si**ffirittttt IP 15^, ipo isp ftfttea-9tt/>ttfflti IP- 
^*#ii-1ll««*BTa ISP, ISP fll«gaft&ttia*. 
J8 IPO Wil^±W«flitt*iStt-*»* 87864321. ^MttHtA&mftntt 

a. b> c, #ft*xnft«ix%*#^M(&«nnift5e^Hxtitbntt$^ 
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